If you execute an installer from a password-protected RAR that you had to brute force, you bypassed the only layer of scrutiny. Run the installer inside a sandbox (e.g., Windows Sandbox, VirtualBox) first.
JavaKiBa (and similar archival groups) typically password-protect their RAR files for several reasons: rar password list for javakiba install
This article serves two purposes: